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Amendments to the Claims: 

This listing of claims will replace all prior versions, and listings of claims in the application: 
Listing of Claims: 

1 . (Currently Amended) A computer-implemented method for using 
workflows to perform a task, the method comprising: 

associating each workflow of a plurality of workflows with a corresponding 
domain of a plurality of domains in an identity system, each domain of said plurality of domains 
comprising one or more entities and each workflow of said plurality of workflows using a 
different predefined set of steps to perform the task; 

receiving a request to perform said task that affects at least one identity profile 
associated with an entity in said identity system; 

determining from said plurality of domains, a domain that includes said entity 
with which said at least one identity profile is associated; 

determining from said plurality of workfiows, a workfiow associated with said 
domain and capable of performing said task; and 

performing said workfiow for said task; 

wherein said performing comprises executing said predefined set of steps of said 
workfiow to perform said task; and 

said request includes an identification of said at least one identity profile. 

2. (Currently Amended) [[A]] The method according to claim 1, wherein: 
said step of associating includes associating said worlcfiow with said domain, said 

stop of associating said workfiow with said domain includes choosing a first entry in said data 
structure, said data structure is a hierarchical data structure of entities in said identity system, 
said domain includes said first entry and entries below said first entry. 

3. -4. (Canceled) 
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5. (Currently Amended) [[A]] The method according to claim 1, wherein: 
said task is a task to delete said at least one identity profile. 

6. (Currently Amended) [[A]] The method according to claim 1, wherein: 
said task is a task to modify said at least one identity profile. 

7. -8. (Canceled) 

9. (Currently Amended) [[A]] The method according to claim 1, wherein: 
said steps of associating, receiving and performing are performed by an integrated 

identity and access system. 

10. (Currently Amended) [[A]] The method according to claim 1, wherein: 
said request is for self-registration. 

1 1 . (Currently Amended) [[A]] The method according to claim 1 , wherein: 
said request is from a parent workflow; and 

said workflow is a sub-workflow to said parent workflow. 

12. (Canceled) 

13. (Currently Amended) [[A]] The method according to claim 2, wherein: 
said hierarchical data structure includes an LDAP directory. 

14. (Currently Amended) One or more processor readable storage devices 
storing plurality of instructions causing a processor to use workflows for performing a task, said 
plurality of instructions comprising code for: 

associating each workflow of a plurality of workflows with a corresponding 
domain of a plurality of domains in an identity system, each domain of said plurality of domains 
comprising one or more entities and each workflow of said plurality of workflows using a 
different predefined set of steps to perform the task; 
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receiving a request to perform said task that affects at least one identity profile 
associated with an entity in said identity system; 

determining from said plurality of domains, a domain that includes said entity 
with which said at least one identity profile is associated; 

determining from said plurality of workflows, a workflow associated with said 
domain and capable of performing said task; and 

performing said workflow for said task; 

wherein said performing comprises executing said predefined set of steps of said 
workflow to perform said task; and 

said request includes an identification of said at least one identity profile. 

15. (Currently Amended) One or more processor readable storage devices 
according to claim 14, wherein: 

said step of associating includes associating said workflow with said domain, said 
stop of associating said workflow with said domain includes choosing a flrst entry in said data 
structure, said data structure is a hierarchical data structure of entities in said identity system, 
said domain includes said flrst entry and entries below said first entry. 

16. -19. (Canceled) 

20. (Previously Presented) One or more processor readable storage devices 
according to claim 14, wherein: 

said steps of associating, receiving and performing are performed by an integrated 
identity and access system. 

21 . (Previously Presented) One or more processor readable storage devices 
according to claim 14, wherein: 

said request is from a parent workfiow; and 

said first workflow is a sub-workflow to said parent workflow. 

22. (Canceled) 
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23. (Previously Presented) One or more processor readable storage devices 
according to claim 15, wherein: 

said hierarchical data structure includes an LDAP directory. 

24. (Currently Amended) An apparatus that uses workflows to perform a task, 

comprising: 

a communication interface; and 

one or more processors in communication with said communication interface, 
said one or more processors configured to perform a method comprising the steps of : 

associating each workflow of a plurality of workflows with a corresponding 
domain of a plurality of domains in an identity system, each domain of said plurality of domains 
comprising one or more entities and each workflow of said plurality of workflows using a 
different predefined set of steps to perform the task; 

receiving a request to perform said task that affects at least one identity profile 
associated with an entity in said identity system; 

determining from said plurality of domains, a domain that includes said entity 
with which said at least one identity profile is associated; 

determining from said plurality of workflows, a workflow associated with said 
domain and capable of performing said task; and 

performing said workflow for said task; 

wherein said performing comprises executing said predefined set of steps of said 
workflow to perform said task; and 

said request includes an identification of said at least one identity profile. 

25. (Currently Amended) [[An]] The apparatus according to claim 24, 

wherein: 

said step of associating includes associating said workflow with said domain, said 
step of associating said workflow with said domain includes choosing a first entry in said data 
structure, said data structure is a hierarchical data structure of entities in said identity system, 
said domain includes said first entry and entries below said first entry. 
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26-29. (Canceled) 

30. (Currently Amended) [[An]] The apparatus according to claim 24, 

wherein: 

said one or more processors are part of an integrated identity and access system. 

3 1 . (Currently Amended) [[An]] The apparatus according to claim 24, 

wherein: 

said request is from a parent workflow; and 

said first workflow is a sub-workflow to said parent workflow. 

32. (Canceled) 

33. (Currently Amended) [[An]] The apparatus according to claim 25, 

wherein: 

said hierarchical data structure includes an LDAP directory. 

34. (Currently Amended) [[A]] The method according to claim 1, wherein 
said task comprises managing said at least one identity profile. 

35. (Currently Amended) [[A]] The method according to claim 34, wherein 
managing said at least one identity profile comprises one or more tasks selected from: creating a 
user, deleting a user, changing a user attribute, creating a group, deleting a group, and changing a 
group attribute. 

36. (Currently Amended) [[A]] The method according to claim 34, wherein 
managing said at least one identity profile comprises managing a certificate associated with said 
at least one identity profile. 

37. -40. (Canceled) 

4 1 . (Currently Amended) The method of claim 1 , wherein performing 
executing said one or more predefined set of steps of said workflow affects said at least one 
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identity profile by modifying one or more attributes of said at least one identity profile said 
modifying including deleting said at least one identity profile. 

42.-43. (Canceled). 

44. (Currently Amended) The method of claim 41, wherein; 

said predefined set of steps comprising comprises a first step and a second step; 

said first step is performed by a first program; 

said second step is performed by a second program; 

information is passed between said first program and said second program 
according to a defined set of rules; at least one of said first program and said second program is 
external to the workflow and wherein said second program performs a second workflow to 
modify one or more attributes of the at least one identity proflle. 

45. (Previously Presented) The method of claim 44, wherein said second 
program is identified in an event catalog of said workfiow. 

46. (Previously Presented) The method of claim 45, wherein the event catalog 
further identifies one or more parameters for passing information between the first program and 
the second program. 

47. (Currently Amended) The method of claim 54, wherein said determining 
said set of workflows that perform the workfiow associated with said domain and capable of 
performing said task and are associated with said domain that includes said entity with which 
said at least one identity proflle is associated, further comprises identifying a workflow 
workflows of said set plurality of workflows for which a user issuing said request to perform said 
task is authorized. 

48. (Previously Presented) The method of claim 47, wherein said at least one 
identity proflle is a static member of a group. 
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49. (Previously Presented) The method of claim 48, wherein said at least one 
identity profile is identified as a static member of said group based on a group identity profile for 
said group. 

50. (Previously Presented) The method of claim 47, wherein said at least one 
identity profile is a dynamic member of a group. 

5 1 . (Previously Presented) The method of claim 50, wherein said at least one 
identity profile is identified as a dynamic member of said group based on application of a rule 
defined by a group identity profile for said group. 

52. (Previously Presented) The method of claim 47, wherein said at least one 
identity profile is a nested member of a group. 

53. (Canceled) 

54. (Currently Amended) The computer-implemented method of claim 1, 
wherein[[:]] said determining from said plurality of workflows, said workflow associated with 
said domain and capable of performing said task comprises: 

determining determines a set of workflows associated with said domain and 
capable of performing said task; 

said method further comprising: 

outputting said set of workflows to a user; and 

receiving from said user a selection of a first said workflow from said set of 
workflows^t-and 

performing said first workflow for said task. 
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